CDOL1

What it is

CDOL1 is a Card Risk Management Data Object List: a template of tag+length entries that tells the terminal exactly which data elements (and in what order) to supply in the first GENERATE ACApplication CryptogramA cryptogram the card generates to approve or decline a transaction: TC (approve offline), ARQC (go online), or AAC (decline). command. The card uses that concatenated data as input to the cryptogram.

Typical CDOL1 entries include amount (9F02), terminal country (9F1A), TVRTerminal Verification ResultsEMV tag 95 — a 5-byte bitfield recording the outcome of the terminal’s risk and verification checks.View in glossary → (95), currency (5F2A), date (9A), transaction type (9C) and the unpredictable number (9F37).

Where it appears

Read from the card record files; consumed by the terminal to build GENERATE ACApplication CryptogramA cryptogram the card generates to approve or decline a transaction: TC (approve offline), ARQC (go online), or AAC (decline). (1).

Specification reference

Defined in: EMV 4.x Book 3 (Application Specification), Annex A — Data Element Dictionary

Decode & build this tag

Related tags